Behavioral task
behavioral1
Sample
3sR15gk.exe
Resource
win7-20231023-en
amadeygluptebaredlinesectopratsmokeloaderxmrig@ytlogsbotkedrupixelnew2.0plostup3backdoordropperevasioninfostealerloaderminerpersistencerattrojanupx
35 signatures
300 seconds
General
-
Target
3sR15gk.exe
-
Size
31KB
-
MD5
7236a93fc04b6771931d84485cbdc585
-
SHA1
a2be526041a72279dd24f944a046de3936829343
-
SHA256
3207ee2e5145e5c6cfd2a64510a33fd8821c483ecd60bb0611a1f643830db47b
-
SHA512
0acff6237feba7f246dfc43172f78ea10e3f85d7f0f8c9ae08e31c6bbdb28a8da5c2e42f704219d7582caff8d962d65b3191a4ecce9ddeb7ffd11e0ac04865d6
-
SSDEEP
384:K9VD6tee+qUOTd2opQTLAdz1SvNmhpdvOjT7PbA6HBiTSnjxZMdP05ldpRMaYIBI:k6Qe+qUv8zcqdvOXA6XkPslJvGaVW
Score
10/10
Malware Config
Signatures
-
Smokeloader family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3sR15gk.exe
Files
-
3sR15gk.exe.exe windows:1 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE